Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d452f3fa-154f-365d-bcbb-746a92901e61.roa
File:                     d452f3fa-154f-365d-bcbb-746a92901e61.roa (raw, json)
Hash identifier:          TBPO9x5Vgu+c67ZFDHnWeWyvjhTE301mkSUdQhvZyiI=
Subject key identifier:   E2:1B:9E:70:9A:91:07:35:CD:A0:52:0E:7B:68:97:B7:F9:D1:19:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D431DCFD8087F00A0F9B6580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d452f3fa-154f-365d-bcbb-746a92901e61.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        107.4.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:dc:fd:80:87:f0:0a:0f:9b:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=705e39a9-8b65-4223-85e0-4f15c0797b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:ab:b0:91:99:32:b7:86:ca:91:96:df:59:
                    06:fe:1e:c0:11:0d:13:90:e5:0e:1a:f6:9f:e6:25:
                    18:2c:c9:12:ed:da:6e:e7:82:5f:2f:8e:02:d5:7f:
                    47:fb:0b:5d:ac:6b:8b:2f:3f:f7:6a:cb:b8:e3:dd:
                    85:58:10:07:9b:5b:d7:e8:b2:f7:4d:0a:c3:89:69:
                    13:54:a7:b1:72:00:f4:8a:64:64:1f:ee:2b:70:4e:
                    6b:ad:05:7d:50:e0:92:c2:47:90:0e:e6:54:52:dc:
                    3d:08:5d:9e:c9:d7:b1:c3:a2:55:b8:7d:72:7c:f3:
                    bf:9d:e3:6c:2a:55:e4:7e:a8:83:08:e0:66:37:a1:
                    ce:1b:df:5c:80:49:8d:a9:5c:5b:d7:29:d2:ea:43:
                    94:9e:1d:f7:66:b2:56:52:e6:6b:5a:28:8b:f0:61:
                    26:f3:53:d8:60:5b:43:c7:cb:0c:4c:14:25:2a:03:
                    77:2d:24:7b:da:f4:a0:37:d8:df:e2:f8:c2:31:d2:
                    8f:d4:da:b7:a3:b2:5e:68:50:04:c9:ed:47:e2:33:
                    83:66:dd:b6:75:ed:eb:ae:86:12:63:8a:0f:ad:fa:
                    5f:3d:77:4b:6c:f9:8d:c7:a4:8c:e8:aa:63:05:1e:
                    e6:86:b9:5c:ac:d1:25:ce:c5:d2:5b:dd:32:42:46:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:9E:70:9A:91:07:35:CD:A0:52:0E:7B:68:97:B7:F9:D1:19:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d452f3fa-154f-365d-bcbb-746a92901e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.4.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:5b:db:78:d2:89:85:07:e5:e9:e7:18:61:94:27:e5:71:c3:
         a1:ac:21:1b:2c:70:5a:e9:86:92:7d:b6:40:58:5d:8b:50:e4:
         10:cf:7b:80:ca:17:1f:8c:01:90:e5:1e:9c:64:c9:aa:ba:e8:
         f7:1c:59:39:87:f0:95:ab:75:fd:8a:62:79:1f:df:ec:cb:c6:
         22:ec:6d:48:14:f1:20:b5:5e:a0:da:e0:31:ca:e1:b2:03:77:
         80:00:45:c0:d2:1e:2a:dd:e0:a3:2b:97:4f:b8:6d:ed:a7:39:
         7b:cc:20:4f:72:aa:af:cc:b5:b3:d8:00:82:aa:fe:c7:c9:56:
         bc:b1:26:52:4d:e7:7e:61:4f:a1:7b:da:35:1f:b2:d0:2a:c9:
         03:3a:5d:82:61:ce:c8:a9:1c:2e:ef:08:70:9f:bc:a1:73:1f:
         f9:31:c8:7b:56:b8:93:54:02:64:37:b4:8a:a4:80:34:23:68:
         6b:6a:3c:79:d7:8e:57:b4:8d:1e:46:7e:99:f7:95:35:67:47:
         78:1c:39:eb:91:c9:6c:1a:67:cd:88:df:1f:34:b7:29:67:6b:
         98:22:80:5c:31:a4:28:72:ee:23:83:b6:c3:99:0c:03:4a:23:
         45:3f:b4:87:39:cf:06:06:dc:2f:c2:70:18:c1:51:a9:fe:69:
         e2:4d:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:02:13 2025 by rpki-client